mlsanityData to 14 Oct 2026

Measuring D'ej`a vu Memorization Efficiently

arXiv 2504.05651 ↗First posted 8 Apr 2025cs.LG cs.CVcited by 2

Not on the map. Why?

Abstract (arXiv)

Recent research has shown that representation learning models may accidentally memorize their training data. For example, the d'ej`a vu method shows that for certain representation learning models and training images, it is sometimes possible to correctly predict the foreground label given only the representation of the background - better than through dataset-level correlations. However, their measurement method requires training two models - one to estimate dataset-level correlations and the other to estimate memorization. This multiple model setup becomes infeasible for large open-source models. In this work, we propose alternative simple methods to estimate dataset-level correlations, and show that these can be used to approximate an off-the-shelf model's memorization ability without any retraining. This enables, for the first time, the measurement of memorization in pre-trained open-source image representation and vision-language representation models. Our results show that different ways of measuring memorization yield very similar aggregate results. We also find that open-source models typically have lower aggregate memorization than similar models trained on a subset of the data. The code is available both for vision and vision language models.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 22 of its 30 references that are in the map. First posted on arXiv 8 Apr 2025.

Builds on

22 of 30 references.

References · 22

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2023Visual Instruction Tuningcited by 7,869
  4. 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
  5. 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,332
  6. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  7. 2020Extracting Training Data from Large Language Modelscited by 2,189
  8. 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,838
  9. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
  10. 2021VICReg: Variance-Invariance-Covariance Regularization for Self-Supervised Learningcited by 1,057
  11. 2021Membership Inference Attacks From First Principlescited by 878
  12. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
10 more
  1. 2022Detecting Twenty-thousand Classes using Image-level Supervisioncited by 614
  2. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
  3. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
  4. 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
  5. 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 147
  6. 2021A Study of Face Obfuscation in ImageNetcited by 83
  7. 2021EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learningcited by 73
  8. 2022Are Attribute Inference Attacks Just Imputation?cited by 49
  9. 2021Quantifying and Mitigating Privacy Risks of Contrastive Learningcited by 36
  10. 2023Do SSL Models Have D'ej`a Vu? A Case of Unintended Memorization in Self-supervised Learningcited by 19

Built on by

Cited by year

Citing papers per year: 2025: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024D'ej`a Vu Memorization in Vision-Language Models
  2. 2025Demystifying Foreground-Background Memorization in Diffusion Models
  3. 2025Memorization in 3D Shape Generation: An Empirical Study
  4. 2025Unsupervised Memorability Modeling from Tip-of-the-Tongue Retrieval Queries
  5. 2024A Geometric Framework for Understanding Memorization in Generative Models
  6. 2023What do larger image classifiers memorise?
  7. 2024Embedding Space Selection for Detecting Memorization and Fingerprinting in Generative Models
  8. 2025SolidMark: Evaluating Image Memorization in Generative Models